CVE-2019-3956: Dameware Remote Mini Control

High severity, CVSS 7.4. EPSS: 1.6% chance of exploitation in the next 30 days.

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating CltDHPubKeyLen during key negotiation, which could crash the application or leak sensitive information.

Affected products

• Dameware Remote Mini Control: up to and including 12.1.0.34

Published 2019-06-07. Last modified 2026-06-17.